Update JSONP docs to mention protection against hijacking